How do I replace FTP with FTPS on the Mainframe



All about SAF, RACF, encryption, Firewall, Risk assessment and integrity concepts

How do I replace FTP with FTPS on the Mainframe

Postby 00022311 » Fri Nov 08, 2013 1:10 am

Our Batch Mainframe Applications Use FTP nightly. What is the scope of work needed to replace FTP and implement /inforce FTPS from the Mainframe to and from Unix, Linux Servers?
00022311
 
Posts: 2
Joined: Fri Nov 08, 2013 1:01 am
Has thanked: 0 time
Been thanked: 0 time

Re: How do I replace FTP with FTPS on the Mainframe

 

Re: How do I replace FTP with FTPS on the Mainframe

Postby Robert Sample » Fri Nov 08, 2013 1:53 am

The IP Configuration Guide manual in the Communications Server bookshelf has information about what needs to be done. Look particularly at the chapter "Customizing Transport Layer Security and Kerberos security" in this manual. Some of the options selected will depend upon site factors, so there is no one-size-fits-all answer.
Robert Sample
Global moderator
 
Posts: 3367
Joined: Sat Dec 19, 2009 8:32 pm
Location: East Dubuque, Illinois
Has thanked: 1 time
Been thanked: 222 times

Re: How do I replace FTP with FTPS on the Mainframe

Postby 00022311 » Fri Nov 08, 2013 2:07 am

Thanks... Robert
00022311
 
Posts: 2
Joined: Fri Nov 08, 2013 1:01 am
Has thanked: 0 time
Been thanked: 0 time

Re: How do I replace FTP with FTPS on the Mainframe

Postby dick scherrer » Fri Nov 08, 2013 7:30 pm

Hello and welcome to the forum,

One of my clients is lookking for a way to implement an SFTP client on the mainframe. Seems like IBM has not yet provided this . . .

@Robert - How does FTPS differ from SFTP?
Hope this helps,
d.sch.
User avatar
dick scherrer
Global moderator
 
Posts: 6304
Joined: Sat Jun 09, 2007 8:58 am
Has thanked: 3 times
Been thanked: 91 times

Re: How do I replace FTP with FTPS on the Mainframe

Postby Robert Sample » Fri Nov 08, 2013 8:00 pm

FTPS is an extension of the FTP standard that encrypts the data via SSL (Secure Sockets Layer). The usual pair of FTP ports (21 / 22 on the server, for example) are used for the control and data connections but data encryption is used.

SFTP is based upon Secure Shell (SSH) and uses a single control / data connection instead of the two ports FTP and FTPS use. As such, it is not compatible with FTP nor FTPS. IIRC, public key encryption is used with SFTP whereas FTPS allows negotiation between client and server as to the encryption used.

These users thanked the author Robert Sample for the post:
Peter_Mann (Fri Nov 08, 2013 10:00 pm)
Robert Sample
Global moderator
 
Posts: 3367
Joined: Sat Dec 19, 2009 8:32 pm
Location: East Dubuque, Illinois
Has thanked: 1 time
Been thanked: 222 times


Return to Mainframe Security

 


  • Related topics
    Replies
    Views
    Last post